Hacking Atmosphere-NX - Custom Firmware in development by SciresM

[naddel81]

Theoretically speaking yes but the evidence thus far says otherwise. Regardless, pirating period automatically increases your chances of getting banned.

So best chances avoiding a ban right now are flight mode and only playing fortnite or legit games online?

Gesendet von meinem Redmi Note 4 mit Tapatalk

 

[Draxzelex]

So best chances avoiding a ban right now are flight mode and only playing fortnite or legit games online?

Gesendet von meinem Redmi Note 4 mit Tapatalk

At least 2 people were banned for backing up their games into .XCI format and playing them online so if you're going to play your legit games online, play them in their original format.

 

[Wuigi]

I would play dumped games of any format only offline and only on emuNAND when it's finally out.
They can detect errors while playing, they can detect it's not bought, the only way would be to have a proper xci mounting where the certificate is transmitted correctly and if the people @Draxzelex mentioned dumped their certificate together with the xci, SX OS doesn't even do xci mounting correctly.
The only safe way atm is to use a separate microSD, never going online and restoring nand before going online with a clean microSD, far too cumbersome and it shortens the lifespan of the NAND memory, so I would really wait for now.

 

[guily6669]

So likely we will need a game and a modified save to use a coldboot exploits in firmwares 2.0.0 - 3.0.0?
I updated my gamecart slot, sadness moment

I don't think it matters much, but if you would already own the needed game, then it would just be a bit more hassle as you couldn't use it... (This is all theoretically speaking off course).

You could just simply run a CFW like SXOS and play the game with the modded save to get the exploit working...

Again this is all theoretically speaking as nothing is released and they might get better working ways with the same type of exploit down the road.

 

[Meriadoc]

I don't think it matters much, but if you would already own the needed game, then it would just be a bit more hassle as you couldn't use it... (This is all theoretically speaking off course).

You could just simply run a CFW like SXOS and play the game with the modded save to get the exploit working...

Again this is all theoretically speaking as nothing is released and they might get better working ways with the same type of exploit down the road.

But for run sx os or other cfw still need auto RCM and a jig. I think the point of that is to start a 2.3 ofw and from that start the cfw.
However with auto RCM I don't have any problems ,so it's fine as is now....

 

[thorasgar]

If DragonInjector is successful, and I have every reason to beleive it will be, coldboot and warmboot are mostly irrelevant to me. It’s not like we have to powecycle the Switch all that frequently.

 

[Ace001]

Sorry to ask and i dont wanna hijack the thread but i just wanna get some opinions! Should i get the sx pro or wait for cfw? I have a jig and usb cord but i dont know how to even get it running.

Much appreciated!

 

[Reaga]

Sorry to ask and i dont wanna hijack the thread but i just wanna get some opinions! Should i get the sx pro or wait for cfw? I have a jig and usb cord but i dont know how to even get it running.

Much appreciated!

If you want backup loaders and simplicity, get SX Pro. But prepare to get banned. If you're willing to wait, Atmosphere will be free. It will likely have an EmuNAND in the future allowing you to prevent bans by being careful, and someone will develop a backup loader eventually. Probably very soon after Atmosphere is released.

I myself am waiting because I intend to use CFW but play Smash online.

 

[thorasgar]

Sorry to ask and i dont wanna hijack the thread but i just wanna get some opinions! Should i get the sx pro or wait for cfw? I have a jig and usb cord but i dont know how to even get it running.

Much appreciated!

Go ask in the stickied noob thread and we will get you all set up.

 

[PatchTuesday]

Sorry to ask and i dont wanna hijack the thread but i just wanna get some opinions! Should i get the sx pro or wait for cfw? I have a jig and usb cord but i dont know how to even get it running.

Much appreciated!

Wait until this is out - https://gbatemp.net/threads/dragoninjector-game-cart-payload-injector-trinket-m0-clone.511780/

Get one of those,then update without burning fuses and use ReiNX or RajNX to play so long.when Atmosphere finally gets to our troposphere (i.e lands) you can revert back to whatever firmware you are on and use "proper CFW" if you so wish

 

[Meriadoc]

If DragonInjector is successful, and I have every reason to beleive it will be, coldboot and warmboot are mostly irrelevant to me. It’s not like we have to powecycle the Switch all that frequently.

Even witouth dragon injector. In the case of my switch I have a type c to type c cable, I can really quick and easily launch payloads from my android phone.

 

[PatchTuesday]

Even witouth dragon injector. In the case of my switch I have a type c to type c cable, I can really quick and easily launch payloads from my android phone.

The beauty of the Dragon Injector is that it lives inside your switch.only take it out when you need it.Chances of not having your phone are slim,but it's nice to have a dedicated peripheral for that particular purpose. Kind of like why people have a multi-tool + dedicated tools in a toolbox

 

[ganons]

Offtopic but what are the odds that TX release a dongle based off dragon injector?

 

[SciresM]

Well SciresM as far as I know always said Coldboot was coming soon for FW1.0... And at first he also stated that FW1.0 would most likely load atmosphere emunand before the others, but that's probably not valid anymore since the RCM exploit works everywhere and was leaked shortly after, but I guess the coldboot for FW1.0 coming soon is still valid, no idea.

I have literally never said this.

There's a screenshot somewhere where I comment in detail on coldboot stuff. It's the one where I say people above 3.0.1 are fucked.

Coldboot is certainly not coming "soon" -- nobody has a bug to enable it. It's theoretically "not impossible" on < 3.0.2 if someone finds an exploitable savedata parsing bug in a sysmodule, because there is a limited (and difficult to abuse) ASLR "bypass" on lower firmwares. Nobody has found an exploitable savedata parsing bug in a sysmodule, though, so until that happens it's all moot.

 

[Draxzelex]

Reposting for those unaware of what on earth he is talking about:

I intend to be fully transparent about this shit, especially going forwards. At present, I'm not aware of any non-RCM means of getting code execution from coldboot. To the best of my knowledge, nobody else is, either.

 

[aerios169]

uhmmm just wondering what would happen if team Sx steal againg the work of uncle SciresM ? :/

 

[xabier]

I have literally never said this.

There's a screenshot somewhere where I comment in detail on coldboot stuff. It's the one where I say people above 3.0.1 are fucked.

Coldboot is certainly not coming "soon" -- nobody has a bug to enable it. It's theoretically "not impossible" on < 3.0.2 if someone finds an exploitable savedata parsing bug in a sysmodule, because there is a limited (and difficult to abuse) ASLR "bypass" on lower firmwares. Nobody has found an exploitable savedata parsing bug in a sysmodule, though, so until that happens it's all moot.

Luckily 3.0.1 and 3.0.2 have same fuse count, so choidujour will make 3.02 switches vulnerable

 

[HideoKojima]

@sirem

spending all my time

How do you get paid, if you spend all your time on this? Jus curious !

 

[Bumblecito]

I have literally never said this.

There's a screenshot somewhere where I comment in detail on coldboot stuff. It's the one where I say people above 3.0.1 are fucked.

Coldboot is certainly not coming "soon" -- nobody has a bug to enable it. It's theoretically "not impossible" on < 3.0.2 if someone finds an exploitable savedata parsing bug in a sysmodule, because there is a limited (and difficult to abuse) ASLR "bypass" on lower firmwares. Nobody has found an exploitable savedata parsing bug in a sysmodule, though, so until that happens it's all moot.

Are you releasing warmboot exploit with atmosphere or gonna wait until Mariko release?

 

[SciresM]

Are you releasing warmboot exploit with atmosphere or gonna wait until Mariko release?

The second thing. Jamais vu is fully public, though, if anyone wants to implement...